Here’s what our cloud hosts had to say about this week’s episode: 348: Compliance Theater Now Available as a Subscriptions
Justin Brodley
I too share the opinion that Microsoft Azure is a pile of shit, but that’s more personal belief and a deep hatred for a platform that feels disorganized, full of sharp edges, and riddled with premium/ultra paywalled features. Still better than whatever the hell Delve is apparently producing for their customers in those SOC 2s though.
Wild week all around. Stay diligent out there, supply chain attacks are increasing and the damage is starting to be felt far and wide. The litellm PyPI compromise this week is a perfect reminder of that. Malicious code quietly collecting SSH keys, cloud credentials, and Kubernetes configs from anyone who pulled it as a transitive dependency. The only reason it got caught? A bug in the malware itself crashed the host. It was designed to be completely silent. If you pulled litellm after March 24th, rotate everything.
Leave a Reply